This vulnerability (CVE-2025-15023) affects the Library Automation System by Yordam Information Technology Consulting, specifically versions starting from 19.5 before 22.1. It is classified as CWE-863, indicating incorrect authorization due to misconfigured access control security levels. The CVSS 3.1 base score is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), reflecting a network attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. The vulnerability allows an attacker to bypass intended access restrictions, potentially leading to unauthorized data access or modification. No patch or official remediation level has been published by the vendor, and the product is not a cloud service. No known exploits have been reported in the wild.

The vulnerability can lead to unauthorized access and potentially full compromise of the affected Library Automation System, impacting confidentiality, integrity, and availability of data and system functions. Given the high CVSS score, successful exploitation could result in significant damage to the system and its data. However, there are no known active exploits reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published, users should monitor vendor communications for updates. Until a patch is available, consider restricting network access to the affected system and enforcing strict user access controls to reduce exposure.